SecurityFocus

[ GLSA 200501-46 ] ClamAV: Multiple issues Jan 31 2005 07:41PM
Sune Kloppenborg Jeppesen (jaervosz gentoo org) (1 replies)

Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Feb 01 2005 09:09AM
Trog (trog uncon org) (1 replies)

On Mon, 2005-01-31 at 20:41 +0100, Sune Kloppenborg Jeppesen wrote:

>
> By sending a base64 encoded image file in a URL an attacker could evade
> virus scanning.

It's somewhat harsh to single out ClamAV for this issue. AFAICT, the
only two virus scanners that do currently protect against this are
ClamAV and AntiVir.

According to current testing, all the others, including:

AVG
Avast
BitDefender
DrWeb
eTrust-Iris
eTrust-Vet
F-Prot
F-Secure
Kaspersky
mks_vir
NOD32
Norman Virus Control
Panda8
Sophos
Sybari
Symantec

do not offer protection against this issue. If anyone sees any errors in
the list above, please let me know

-trog

[ reply ]

Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Feb 01 2005 10:41PM
Dack (dackbug ereomega net) (2 replies)

Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Feb 02 2005 01:33PM
Darren Bounds (lists intrusense com)

Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Feb 01 2005 11:16PM
Trog (trog uncon org) (1 replies)

Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues Feb 02 2005 07:17PM
exon (exon home se)